Lucene search
K

7491 matches found

Circl
Circl
added 2025/08/21 4:43 p.m.3 views

CVE-2025-9181

creationtimestamp| type| source ---|---|--- 2025-08-21 16:43:38+00:00| seen| https://poliverso.org/objects/0477a01e-e29b5790-dee7d8d408d4834a...

6.5CVSS6.2AI score0.00124EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-16838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side,...

5.5CVSS6AI score0.01085EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/20 4:27 p.m.6 views

CVE-2025-55201

Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write arbitrary files because Copier exposes a few pathlib.Path objects in the Jinja context which have unconstrained I/O methods. This effectively renders the security model w.r.t...

8.5CVSS6.3AI score0.00058EPSS
Exploits0References1
Circl
Circl
added 2025/08/20 1:30 p.m.8 views

CVE-2025-31143

creationtimestamp| type| source ---|---|--- 2025-08-20 13:30:52+00:00| seen| https://infosec.place/objects/e330efb1-ca61-407a-bbde-18287fbb706e...

7.3AI score
Exploits0References1
Veracode
Veracode
added 2025/08/20 10:43 a.m.3 views

Sensitive Information Disclosure

org.opensearch.plugin:opensearch-security is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper enforcement of Field Level Security FLS rules due to member attributes of excluded objects still being accessible through search queries, allowing reconstruction of...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2016-5128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without...

8.8CVSS8.1AI score0.01456EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-1552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The...

8.8CVSS7.6AI score0.02263EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-5094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to...

6.5CVSS7.4AI score0.00985EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-31626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdomysql extension with mysqlnd driver, if the third party is allowed to...

8.8CVSS9.1AI score0.1024EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-6065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a...

8.8CVSS8.5AI score0.89553EPSS
Exploits2References2
OSV
OSV
added 2025/08/18 9:0 p.m.8 views

GHSA-MGH9-4MWP-FG55 OpenFGA Authorization Bypass

Overview OpenFGA v1.9.3 to v1.9.4 openfga-0.2.40 = Helm chart = openfga-0.2.41, v1.9.3 = docker = v.1.9.4 are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. Am I Affected? You are affected by this vulnerability if you are using OpenFGA v1.9.3 to...

5.8CVSS7AI score0.00114EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2025/08/18 9:0 p.m.3 views

Copier's safe template has arbitrary filesystem read/write access

Impact Copier's current security model shall restrict filesystem access through Jinja: - Files can only be read using % include ... %, which is limited by Jinja to reading files from the subtree of the local template clone in our case. - Files are written in the destination directory according to...

8.5CVSS7.2AI score0.00058EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/08/18 9:0 p.m.0 views

GHSA-3XW7-V6CJ-5Q8H Copier's safe template has arbitrary filesystem read/write access

Impact Copier's current security model shall restrict filesystem access through Jinja: - Files can only be read using % include ... %, which is limited by Jinja to reading files from the subtree of the local template clone in our case. - Files are written in the destination directory according to...

8.5CVSS6AI score0.00058EPSS
Exploits0References4
NVD
NVD
added 2025/08/18 5:15 p.m.3 views

CVE-2025-55201

Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write arbitrary files because Copier exposes a few pathlib.Path objects in the Jinja context which have unconstrained I/O methods. This effectively renders the security model w.r.t...

8.5CVSS0.00058EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/18 4:21 p.m.3 views

CVE-2025-55201 Copier safe template has arbitrary filesystem read/write access

Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write arbitrary files because Copier exposes a few pathlib.Path objects in the Jinja context which have unconstrained I/O methods. This effectively renders the security model w.r.t...

8.5CVSS7.2AI score0.00058EPSS
Exploits0References2
CVE
CVE
added 2025/08/18 4:21 p.m.13 views

CVE-2025-55201

CVE-2025-55201 concerns the Copier library/CLI used for rendering project templates. Prior to version 9.9.1, the template rendering context exposes certain pathlib.Path objects in Jinja with unconstrained I/O methods, enabling a safe template to read and write arbitrary files on the filesystem an...

8.5CVSS6.6AI score0.00058EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/18 4:21 p.m.8 views

CVE-2025-55201 Copier safe template has arbitrary filesystem read/write access

Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write arbitrary files because Copier exposes a few pathlib.Path objects in the Jinja context which have unconstrained I/O methods. This effectively renders the security model w.r.t...

8.5CVSS0.00058EPSS
Exploits0References2
OSV
OSV
added 2025/08/18 4:21 p.m.3 views

CVE-2025-55201 Copier safe template has arbitrary filesystem read/write access

Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write arbitrary files because Copier exposes a few pathlib.Path objects in the Jinja context which have unconstrained I/O methods. This effectively renders the security model w.r.t...

8.5CVSS6.6AI score0.00058EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2025/08/18 1:9 a.m.290 views

Exploit for CVE-2024-28397

CVE-2024-28397 - js2py Sandbox Escape Description The CV...

5.3CVSS7.2AI score0.59353EPSS
Exploits22
Positive Technologies
Positive Technologies
added 2025/08/18 12:0 a.m.3 views

PT-2025-33667 · Copier · Copier

Name of the Vulnerable Software and Affected Versions: Copier versions prior to 9.9.1 Description: Copier exposes pathlib.Path objects in the Jinja context with unconstrained I/O methods, allowing a safe template to read and write arbitrary files. This renders the security model regarding...

8.5CVSS7.3AI score0.00058EPSS
Exploits0References10
Rows per page
Query Builder